13 results
The Japan Chamber of Commerce and Industry (JCCI) announced on Nov 10 that the external exam management server used for its online tests was accessed without authorization, and data of up to about 980,000 examinees (about 1.
BleepingComputer reports that researcher Sean Bales publicly disclosed more than 30 N-able N-central vulnerabilities on Nov 8 without notifying the vendor and released proof-of-concept exploits in a GitHub repository called Able2Shell, the most critical chain using an unauthenticated XXE flaw to run commands on the server and create an admin account .
The Japan Network Security Association (JNSA) announced on November 6 that its "Information Security Comprehension Test Service" suffered unauthorized third-party access, potentially exposing personal data for up to approximately 15,128 users .
Security firm Todyl says that since Nov 1 an attacker has been using stolen, still-valid credentials to sign in to MSPs' Microsoft 365 and Azure environments as their own applications, targeting about 45 app registrations at roughly 18 organizations with more than 33 authenticating successfully .
According to CyberInsider, French intellectual property software and services firm Questel confirmed a voice phishing attack led to unauthorized access to a Sales SharePoint environment in its Microsoft 365, and some stolen data has been published .
ADT said its systems detected unauthorized access to a limited set of customer and prospective customer data on April 20, terminated the intrusion and launched a forensic investigation .
According to Digital Daily, Jinhaksa's job platform Catch announced that hackers attacked its website between the afternoon of March 20 and the morning of March 23, 2026, leaking some members' personal data .
According to GovInfoSecurity, US benefits administrator Navia Benefit Solutions reported a breach affecting 2.
DBsense said many marketers reported impersonation calls citing their platform nicknames, and it judged that member nicknames and mobile numbers had very likely leaked through an abnormal route .
According to Security NEXT, LASSIC, operator of the remote talent service Remogu, detected an attack on November 11, 2025, finding traces of unauthorized operations on its server .
The Cyber Security Agency of Singapore (CSA) and the Monetary Authority of Singapore (MAS) issued a joint statement regarding a ransomware attack on printing vendor Toppan Next Tech .
NTT Communications announced on March 5, 2025, that it had detected unauthorized access to an internal system on February 5 .
On February 22, 2024, CISA added ConnectWise ScreenConnect vulnerability CVE-2024-1709 to its Known Exploited Vulnerabilities (KEV) catalog .